Maven/org.bouncycastle:bcprov-jdk18on CVE-2026-5598: high 7.5, EPSS 0.90%
Bouncy Castle Has Covert Timing Channel Vulnerability
Action: Upgrade org.bouncycastle:bcprov-jdk18on to 1.80.2 (1.80.x) or 1.84 (1.84.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.82 | 1.84 | - |
| 1.81 | 1.84 | - |
| 1.71 | 1.80.2 | - |
Fixed versions
| 1.84 | 1.80.2 |
Sources
- osv: GHSA-p93r-85wp-75v3#Maven/org.bouncycastle:bcprov-jdk18on
- nvd: CVE-2026-5598
- https://github.com/bcgit/bc-java/commit/8692e6b2b191fc4aafa32545c7a78bdb9bf110c5
- https://github.com/bcgit/bc-java/commit/94abbd56413dfdac651fd878bc60253871ef5e87
- https://github.com/bcgit/bc-java
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905598
- https://github.com/bcgit/bc-java/wiki/CVE-2026-5598
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5598.json
- https://bugzilla.redhat.com/show_bug.cgi?id=2458635
- https://access.redhat.com/security/cve/CVE-2026-5598
- https://access.redhat.com/errata/RHSA-2026:53806
- https://access.redhat.com/errata/RHSA-2026:53646
- https://access.redhat.com/errata/RHSA-2026:53645
- https://access.redhat.com/errata/RHSA-2026:53644
- https://access.redhat.com/errata/RHSA-2026:18059
- https://access.redhat.com/errata/RHSA-2026:18055
- https://access.redhat.com/errata/RHSA-2026:18054
- https://access.redhat.com/errata/RHSA-2026:12269
- https://access.redhat.com/errata/RHSA-2026:12267
CVE-2026-5598 · published · modified · JSON